$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa File: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (raw, json) Hash identifier: V7UBWkqs6QKqwFWqiHRbtYPN+2HNCy8jGoSJOuVxEjI= Subject key identifier: CE:D4:DA:C6:B7:1D:12:0D:E0:FD:DF:25:2E:FD:5D:DA:67:3B:FC:17 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 419EFFCF8E65AD3B7448DE94943B9EA4A6BF6A8D Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa Signing time: Fri 20 Mar 2026 15:00:00 +0000 ROA not before: Fri 20 Mar 2026 14:55:00 +0000 ROA not after: Fri 19 Mar 2027 15:00:00 +0000 asID: 136075 IP address blocks: 103.84.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9e:ff:cf:8e:65:ad:3b:74:48:de:94:94:3b:9e:a4:a6:bf:6a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Mar 20 14:55:00 2026 GMT Not After : Mar 19 15:00:00 2027 GMT Subject: CN=CED4DAC6B71D120DE0FDDF252EFD5DDA673BFC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:56:16:76:f5:33:31:e5:5c:38:84:12:80:21: 18:e1:c2:26:4d:14:b9:8f:e4:ac:b0:a7:53:03:3f: 66:ff:eb:aa:bc:a2:38:5e:d5:c1:e9:5e:e9:6c:24: 68:50:2f:db:e7:f9:a0:de:d3:0a:1d:fe:9e:cc:27: 9d:88:aa:74:ee:01:97:8a:08:2c:ff:b7:d7:19:3b: e6:e0:58:1b:28:8e:fc:46:56:62:13:34:65:4f:e6: fc:ef:49:c7:67:ac:eb:07:53:35:20:06:65:45:61: 9a:c5:01:c4:d1:c9:ee:f1:b3:ad:82:4a:8d:7b:68: f1:65:c6:e4:87:5b:28:58:06:fe:9b:e1:24:f7:ef: 19:3a:47:61:02:93:8f:07:a5:69:36:e9:10:b5:8e: 0e:6f:25:99:05:53:eb:f2:a2:ab:94:64:34:1d:bf: a7:31:c2:e2:41:00:da:c7:3b:00:a3:22:86:a3:f8: 20:d8:07:26:0d:1e:30:64:39:28:34:78:cd:fe:56: 24:54:9e:23:0f:8f:78:42:e7:c4:d9:24:92:35:46: f9:88:21:28:a2:20:85:fa:44:32:d7:dd:97:73:bb: b4:a0:3c:a5:17:e1:d9:fc:a3:cb:4a:86:fe:d5:87: a1:c2:7c:a7:fd:f0:7d:2f:bd:0b:e4:0f:94:f8:29: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D4:DA:C6:B7:1D:12:0D:E0:FD:DF:25:2E:FD:5D:DA:67:3B:FC:17 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.210.0/24 Signature Algorithm: sha256WithRSAEncryption 26:3f:2a:62:1e:28:f0:25:1f:f8:b1:89:bc:93:98:75:86:c6: 65:1b:ef:ef:6b:7b:97:e4:6f:e6:ae:27:70:47:e2:a1:27:28: 12:2b:6c:c5:e4:ce:5e:cf:22:ee:a1:99:f8:b0:7a:b1:af:47: cc:31:ec:09:1b:41:2d:0b:96:80:0d:51:89:a8:cd:3c:72:b7: 9c:6d:d2:32:42:b0:65:ff:21:12:cd:e2:e6:25:90:5d:ca:12: 45:73:bd:e1:a1:e5:f8:f0:b8:2f:48:e9:f5:0b:8d:e1:a4:06: f8:55:4a:f0:b5:22:3b:54:43:ae:0f:49:7b:77:e3:ca:1d:ed: d7:5e:ad:c9:75:13:33:52:8e:c6:91:87:66:60:80:cf:f3:68: 7f:63:c1:8c:37:48:fd:41:2b:16:0c:07:02:b4:81:04:72:db: 60:9f:9b:de:5a:9b:a5:1a:38:02:5a:5e:35:61:f7:f7:0b:ac: 5e:e9:75:17:ed:94:58:94:b0:14:39:87:e6:0c:f0:d8:c1:3b: bb:68:e3:6e:68:a0:4f:53:59:91:49:83:74:09:6f:6b:10:f3: 60:f8:dc:49:e4:db:e1:43:83:9c:b9:70:0b:3f:a2:d4:90:a4: 95:33:0c:f8:44:8a:86:eb:44:ee:11:c3:4f:9c:65:ed:a2:c3: fb:31:f0:a7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQZ7/z45lrTt0SN6UlDuepKa/ao0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNjAzMjAxNDU1MDBaFw0yNzAzMTkxNTAwMDBaMDMxMTAvBgNV BAMTKENFRDREQUM2QjcxRDEyMERFMEZEREYyNTJFRkQ1RERBNjczQkZDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgVhZ29TMx5Vw4hBKAIRjhwiZN FLmP5Kywp1MDP2b/66q8ojhe1cHpXulsJGhQL9vn+aDe0wod/p7MJ52IqnTuAZeK CCz/t9cZO+bgWBsojvxGVmITNGVP5vzvScdnrOsHUzUgBmVFYZrFAcTRye7xs62C So17aPFlxuSHWyhYBv6b4ST37xk6R2ECk48HpWk26RC1jg5vJZkFU+vyoquUZDQd v6cxwuJBANrHOwCjIoaj+CDYByYNHjBkOSg0eM3+ViRUniMPj3hC58TZJJI1RvmI ISiiIIX6RDLX3Zdzu7SgPKUX4dn8o8tKhv7Vh6HCfKf98H0vvQvkD5T4KSLXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUztTaxrcdEg3g/d8lLv1d2mc7/BcwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMGU1YWMyLWI2YmItNGJlYy05 ZGM5LWU0MzBhNjczMzIxNi8wLzMxMzAzMzJlMzgzNDJlMzIzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TSMA0GCSqG SIb3DQEBCwUAA4IBAQAmPypiHijwJR/4sYm8k5h1hsZlG+/va3uX5G/mridwR+Kh JygSK2zF5M5ezyLuoZn4sHqxr0fMMewJG0EtC5aADVGJqM08crecbdIyQrBl/yES zeLmJZBdyhJFc73hoeX48LgvSOn1C43hpAb4VUrwtSI7VEOuD0l7d+PKHe3XXq3J dRMzUo7GkYdmYIDP82h/Y8GMN0j9QSsWDAcCtIEEcttgn5veWpulGjgCWl41Yff3 C6xe6XUX7ZRYlLAUOYfmDPDYwTu7aONuaKBPU1mRSYN0CW9rEPNg+NxJ5NvhQ4Oc uXALP6LUkKSVMwz4RIqG60TuEcNPnGXtosP7MfCn -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:36 2026 by rpki-client